Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6c9614-562d-42db-8609-452eea8b5eac/1/kH4Am_EKApaltVx9KxYjSr2P9f8.mft
File: kH4Am_EKApaltVx9KxYjSr2P9f8.mft (raw, json)
Hash identifier: m8hhtK5ztySJqp+nm6twiCQnOlJkRHncikhVlDtKeEM=
Subject key identifier: 1D:08:88:0A:A5:9D:81:3B:D3:F1:8B:EE:93:31:BF:46:F8:BB:34:BC
Authority key identifier: 90:7E:00:9B:F1:0A:02:96:A5:B5:5C:7D:2B:16:23:4A:BD:8F:F5:FF
Certificate issuer: /CN=907e009bf10a0296a5b55c7d2b16234abd8ff5ff
Certificate serial: 019D37C06CB899B18B8AAB3F4030CAD7B5CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kH4Am_EKApaltVx9KxYjSr2P9f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c9614-562d-42db-8609-452eea8b5eac/1/kH4Am_EKApaltVx9KxYjSr2P9f8.mft
Manifest number: CF
Signing time: Sun 29 Mar 2026 04:00:50 +0000
Manifest this update: Sun 29 Mar 2026 04:00:50 +0000
Manifest next update: Mon 30 Mar 2026 04:00:50 +0000
Files and hashes: 1: Hj-7tqLsSWaA1UtQr2xMzNqAnyw.roa (hash: 9Qv3oDioBW3X+4WvVAkRPhv8k9qZnHux4lp0b9HREa0=)
2: kH4Am_EKApaltVx9KxYjSr2P9f8.crl (hash: MvUPBuDYYIGpbWiYUy/6b+y9dOfXMa3S4cyta0j/xgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6c9614-562d-42db-8609-452eea8b5eac/1/kH4Am_EKApaltVx9KxYjSr2P9f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/6c9614-562d-42db-8609-452eea8b5eac/1/kH4Am_EKApaltVx9KxYjSr2P9f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kH4Am_EKApaltVx9KxYjSr2P9f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:6c:b8:99:b1:8b:8a:ab:3f:40:30:ca:d7:b5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907e009bf10a0296a5b55c7d2b16234abd8ff5ff
Validity
Not Before: Mar 29 04:00:50 2026 GMT
Not After : Mar 30 04:00:50 2026 GMT
Subject: CN=1d08880aa59d813bd3f18bee9331bf46f8bb34bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:72:af:88:b8:8d:66:3f:85:d4:29:24:30:ab:
b7:e8:e7:46:49:b9:a3:b2:6c:59:cc:91:80:26:b7:
ad:be:0e:ed:e0:5a:77:74:01:7b:75:62:0a:14:86:
12:b1:9e:66:58:fe:c5:6e:f8:6e:af:bc:25:af:d4:
d1:a7:87:21:eb:d7:bc:c4:20:de:90:c1:c6:e6:3a:
09:b2:db:74:38:f8:c8:a7:d8:45:33:27:ce:34:cf:
c2:0c:94:02:26:fc:8c:f8:16:55:2d:14:39:2b:c7:
38:cc:f0:37:75:08:36:f1:51:6a:57:e8:9d:93:b6:
aa:aa:c5:38:62:80:53:ab:89:a5:be:42:09:1d:ba:
68:67:05:e7:69:38:70:b3:99:9a:18:fe:f1:a4:5f:
5b:92:35:14:c0:a9:87:f7:9e:f3:63:8e:b3:c9:21:
49:90:01:16:53:69:10:23:db:68:e7:81:d4:5c:32:
65:0f:f7:ea:ea:b3:19:e9:90:12:a2:a7:a2:7f:8f:
eb:d2:d1:09:da:e1:67:82:43:f7:93:aa:7d:d2:df:
55:d2:b3:64:a4:a5:9b:87:f6:f3:7c:e9:40:85:f6:
4e:8b:d9:da:c4:e7:ea:67:85:ec:82:93:f1:ec:ec:
a1:fb:c6:27:11:21:6f:4e:8f:cc:ad:3c:9e:a5:24:
b5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:08:88:0A:A5:9D:81:3B:D3:F1:8B:EE:93:31:BF:46:F8:BB:34:BC
X509v3 Authority Key Identifier:
keyid:90:7E:00:9B:F1:0A:02:96:A5:B5:5C:7D:2B:16:23:4A:BD:8F:F5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kH4Am_EKApaltVx9KxYjSr2P9f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c9614-562d-42db-8609-452eea8b5eac/1/kH4Am_EKApaltVx9KxYjSr2P9f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6c9614-562d-42db-8609-452eea8b5eac/1/kH4Am_EKApaltVx9KxYjSr2P9f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e4:70:dd:f7:42:0d:e2:bf:06:e5:72:50:29:b4:21:d6:de:
2b:7b:dc:72:11:6a:df:97:41:e8:1e:0f:37:cd:00:30:11:b4:
39:7a:4a:65:b3:c0:27:20:16:a6:6b:da:2c:c4:f3:04:21:bf:
ee:a8:8b:d8:8f:27:6d:0e:a1:45:73:97:f7:01:5e:da:d3:e8:
7c:fa:19:79:5c:b9:ff:0b:79:15:e3:78:e6:c7:04:f8:79:4e:
41:2f:c8:9d:5c:7e:e5:60:b0:9c:07:cb:11:80:ad:da:27:e2:
76:94:75:b2:32:e9:ac:73:42:f8:07:4c:73:99:8e:66:80:18:
05:00:15:3f:c3:46:6d:94:73:9b:00:42:ce:81:6f:20:e3:86:
0c:2c:fe:49:68:6d:52:0f:e2:7a:04:36:dd:42:f0:c1:95:81:
42:6e:67:79:57:56:b7:72:44:69:d4:0b:09:3d:d4:4b:3e:55:
bc:e8:0c:13:06:9c:e9:8a:ca:7e:8a:aa:c2:6d:1f:a3:f4:ea:
69:01:d8:d6:69:91:4e:04:b2:a5:bd:9a:08:8e:61:0f:4b:62:
35:4b:16:dc:2d:e6:ef:7f:db:99:57:01:50:51:54:2d:99:0b:
90:74:ca:ac:c2:16:68:80:3f:76:c9:d6:97:88:c2:85:fe:c7:
45:10:8a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:24 2026 by rpki-client